Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/dea7eb27-81e9-38b1-8e44-9f1410b4c0ac.roa
File:                     dea7eb27-81e9-38b1-8e44-9f1410b4c0ac.roa (raw, json)
Hash identifier:          /AOzo+XrpRghYjWWnvN0+Vt2fwh+h00FFKkUO+b0DDo=
Subject key identifier:   C3:20:16:33:7C:98:44:8F:65:69:3D:20:AC:26:7F:C0:E9:B8:4F:56
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F43285849806F1737177A0112D43649C0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/dea7eb27-81e9-38b1-8e44-9f1410b4c0ac.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     13414
IP address blocks:        69.195.190.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:17:37:17:7a:01:12:d4:36:49:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=6d7ff2af-0d18-4a93-890e-4ff8d014cc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:80:eb:74:69:c2:4d:34:a8:83:77:83:0b:
                    02:85:51:ee:54:5f:07:b7:d1:13:ed:da:1e:cf:5e:
                    47:34:48:5e:b6:38:62:03:1a:40:fc:61:47:fb:1d:
                    06:12:c4:7d:2f:11:ec:f3:a4:ff:80:ee:62:67:6c:
                    ae:0c:03:74:47:53:39:07:90:c5:8b:fb:8b:40:57:
                    bc:44:40:ca:a1:a1:8d:cb:85:63:5e:c3:fa:12:f9:
                    90:8f:5b:30:e2:52:7a:ba:2d:85:ed:1d:a6:5e:8f:
                    cd:7e:bf:cc:75:e6:6a:e2:ff:2a:61:6f:4f:74:75:
                    93:f3:4f:c7:62:88:7c:cc:5c:33:87:e8:dc:c7:ad:
                    ad:c5:70:2c:20:c5:9c:d7:ad:6b:8e:c0:89:02:65:
                    8d:ab:60:35:00:17:e6:71:f5:bd:77:ed:fd:65:1f:
                    37:13:72:0f:25:31:b3:35:5b:b9:09:36:ee:9d:24:
                    e5:3c:cb:d5:56:67:dd:b2:74:28:e0:de:a3:c6:4c:
                    eb:c7:c8:d8:59:43:35:96:f5:eb:8b:66:07:ea:08:
                    cc:78:39:4f:df:01:48:95:88:9a:72:72:6f:02:a3:
                    ed:64:8c:11:7e:2e:c1:c4:bd:8b:6f:95:55:8d:f2:
                    a5:1c:a4:f1:af:e8:ff:d6:ae:34:99:42:b8:1c:a9:
                    46:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:20:16:33:7C:98:44:8F:65:69:3D:20:AC:26:7F:C0:E9:B8:4F:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/dea7eb27-81e9-38b1-8e44-9f1410b4c0ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.195.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:4a:3e:50:49:95:32:ad:c8:ee:06:3f:c7:0d:ef:2e:c7:fb:
         46:e0:5c:c5:9d:d1:09:b2:c7:cc:67:cb:55:a8:e6:5c:c4:c3:
         cf:4d:c7:31:bf:28:45:70:bb:35:b8:02:ab:2c:8d:03:83:d6:
         7a:c2:1a:fe:6a:f2:53:0c:07:89:1f:c4:69:4d:e4:e7:e6:14:
         8c:1e:f9:89:11:08:21:41:6e:86:56:70:b7:12:57:80:ce:d4:
         c5:8f:d8:f4:03:3d:04:73:71:69:76:91:72:64:83:8b:b6:a8:
         f1:36:6c:c8:26:51:43:b1:7f:e4:76:6f:f8:d5:e8:67:e2:f9:
         a0:33:1a:be:67:8c:45:6f:bc:b9:dc:db:3f:bc:c5:d9:31:f3:
         c4:de:a1:33:e2:57:e1:ce:9f:18:52:4b:07:79:9c:76:d7:85:
         d3:d5:d7:f4:a0:a2:7e:2d:03:0b:18:98:35:9b:55:81:e4:f8:
         55:73:80:40:82:db:a9:50:f9:7e:db:c4:10:cb:65:2e:0c:8b:
         88:0a:99:5c:00:f7:0d:e7:d5:2b:c8:6f:18:ea:58:74:50:63:
         7d:cd:74:5d:5d:a0:5c:7b:64:35:21:e6:85:fb:dc:7d:92:bb:
         ff:5c:e1:44:87:8a:f6:67:da:97:a2:bf:43:76:b9:38:ef:6f:
         3f:1e:60:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbxc3F3oBEtQ2ScAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjlmN2I2OWEtYjUxOS00YjJkLWE3YmUtMDNhYTUwNWIy
NTc2MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk
NmQ3ZmYyYWYtMGQxOC00YTkzLTg5MGUtNGZmOGQwMTRjYzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0eA63Rpwk00qIN3gwsChVHuVF8Ht9ET7doe
z15HNEhetjhiAxpA/GFH+x0GEsR9LxHs86T/gO5iZ2yuDAN0R1M5B5DFi/uLQFe8
REDKoaGNy4VjXsP6EvmQj1sw4lJ6ui2F7R2mXo/Nfr/MdeZq4v8qYW9PdHWT80/H
Yoh8zFwzh+jcx62txXAsIMWc161rjsCJAmWNq2A1ABfmcfW9d+39ZR83E3IPJTGz
NVu5CTbunSTlPMvVVmfdsnQo4N6jxkzrx8jYWUM1lvXri2YH6gjMeDlP3wFIlYia
cnJvAqPtZIwRfi7BxL2Lb5VVjfKlHKTxr+j/1q40mUK4HKlGQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMMgFjN8mESPZWk9IKwmf8DpuE9WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3
YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2FhNTA1YjI1NzYvZGVhN2ViMjctODFlOS0z
OGIxLThlNDQtOWYxNDEwYjRjMGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjlmN2I2OWEtYjUxOS00YjJkLWE3
YmUtMDNhYTUwNWIyNTc2LzY5ZjdiNjlhLWI1MTktNGIyZC1hN2JlLTAzYWE1MDVi
MjU3Ni5jcmwwHwYDVR0jBBgwFoAU+BZ/J/My28k/b6+VdgSdk12bGXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy82OWY3YjY5YS1iNTE5LTRiMmQtYTdiZS0wM2Fh
NTA1YjI1NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARcO+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAdKPlBJlTKtyO4GP8cN7y7H+0bgXMWd0Qmyx8xny1Wo5lzEw89NxzG/
KEVwuzW4AqssjQOD1nrCGv5q8lMMB4kfxGlN5OfmFIwe+YkRCCFBboZWcLcSV4DO
1MWP2PQDPQRzcWl2kXJkg4u2qPE2bMgmUUOxf+R2b/jV6Gfi+aAzGr5njEVvvLnc
2z+8xdkx88TeoTPiV+HOnxhSSwd5nHbXhdPV1/Sgon4tAwsYmDWbVYHk+FVzgECC
26lQ+X7bxBDLZS4Mi4gKmVwA9w3n1SvIbxjqWHRQY33NdF1doFx7ZDUh5oX73H2S
u/9c4USHivZn2peiv0N2uTjvbz8eYAo=
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:55 2025 by rpki-client on console.sobornost.net